Policy & Regulation — Page 7
Cyberattack Strikes Liechtenstein's Register of Company and Foundation Owners
Criminals hit a government database designed to fight money laundering, raising fresh questions about how well sensitive ownership records are protected.
Your Company's Vendor Problem Starts Before Anyone Calls Security
When businesses pick software first and ask security questions second, they hand criminals a head start. Here is why fixing that order matters, and what a grown-up process actually looks like.
When a Browser Stops Trusting a Certificate Authority, Nobody Owns the Aftermath
Google's 2024 decision to drop Entrust from Chrome was technically correct. What happened next exposed a gap that no government agency, standards body, or industry forum is built to fill.
California's Delete Act: A New Era for Data Privacy Rights
California's groundbreaking Delete Act platform lets residents erase their data from scores of brokers. Companies must adapt to a new compliance challenge.
The EU's New Brussels Team Will Police AI Deepfakes and Label Chatbot Content
Europe's AI Act brings mandatory labelling for AI-generated content and a dedicated enforcement unit to Brussels. Here's what that means for anyone who reads news, uses chatbots, or runs a business online.
Why Asking the Right Questions Matters More Than Expanding Compliance Frameworks
The compliance programs that hold up aren't the largest ones. They're built on a short list of answerable questions.
CISA Publishes Open Source Security Playbook for Federal Agencies
The new guidance lays out how agencies should vet, use, and publish open source code, and introduces a trust framework called C4.
US House passes kids' online safety bill, but critics say the cure may be worse than the disease
The KIDS Act cleared the House 267-117 on Monday. It demands new parental controls and bans targeted ads at children, but digital rights groups warn that age-verification rules could quietly strip privacy from every adult online too.
US and allies rewrite the software 'ingredients list' rulebook for 2026
CISA, the NSA, the FBI and international partners have updated the minimum elements for a Software Bill of Materials, replacing 2021 guidance that industry had outgrown.
The FCC Just Banned Chinese Humanoid Robots. Here Is What That Actually Means.
America's telecoms regulator has blocked imports of new Chinese-made humanoid robots and power inverters on national security grounds. China holds roughly 85 percent of the global market for humanoids. The fight over who controls the machines of the future is now very much a trade war.
Nearly Three in Four Companies Admit They Aren't Ready for a Serious Cyberattack
A survey of 600 senior IT security leaders finds most have the tools but lack the coordination, visibility and boardroom alignment to survive a real incident.
Russia Charges Telegram's Pavel Durov With Aiding Terrorism
The FSB says Telegram refused to take down channels it flagged. Durov, living abroad, calls the case political theatre.
The US Government Just Changed How Agencies Must Fix Security Flaws. It Is Not Enough.
A new federal directive finally ties patch deadlines to real-world risk. Then AI rewrote the problem.
US and Australian agencies publish playbook for cutting critical systems off in a crisis
New joint guidance tells power, water and transport operators how to run in isolation when a cyberattack or geopolitical crisis forces the plug to be pulled.
AI Smart Glasses Are Walking Into Your Office. Nobody Knows How to Stop Them.
Samsung's entry into AI-powered glasses has forced security leaders to face an uncomfortable truth: the recording device problem is already everywhere, and a ban probably makes things worse.